Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
File: adSSvj_PjMWoWckEjFD9QL_bd4c.cer (raw, json)
Hash identifier: qFMpCPCULcYBMo5WVdGBnpZS+GgIWTbfhpM7ZRPk2IE=
Subject key identifier: 69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425220283AED86453E6ACE896953507E2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49761
IP: 95.215.76.0/22
IP: 109.197.39.0/24
IP: 193.28.226.0/24
IP: 193.37.140.0/24
IP: 195.211.8.0/22
IP: 2001:67c:c90::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:02:83:ae:d8:64:53:e6:ac:e8:96:95:35:07:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:7a:5e:d0:99:45:c3:f6:7d:88:50:85:7f:
b0:f5:71:2c:39:0a:c2:db:41:be:b9:60:73:16:b4:
49:3d:57:34:84:c1:43:8c:2c:2c:23:e9:e9:de:96:
d8:01:1d:97:4e:cf:9e:ec:c4:05:7b:11:ac:7c:64:
e2:53:84:03:e0:93:71:77:20:13:a6:96:9f:04:15:
21:9e:97:be:43:b8:a1:01:10:26:ab:23:7b:9c:bb:
8a:4a:d7:47:d2:37:95:33:cc:8c:3e:46:27:66:bb:
f3:64:30:5c:52:bf:d6:8c:eb:9d:2c:c6:20:28:59:
16:48:b7:cd:50:8f:b9:5f:66:f8:02:17:dd:88:56:
54:57:ed:ae:ce:09:08:d8:f6:4f:3d:f3:d6:2a:52:
b8:09:9c:8b:3e:e6:31:92:fd:df:38:a5:cc:b9:1b:
1e:15:58:28:16:de:e7:87:51:f1:1a:bf:80:3b:a2:
0a:32:10:f7:8c:64:eb:dd:6b:84:41:2e:05:2f:cb:
13:2b:a8:f7:ec:e3:ba:a9:75:c0:73:87:0e:3a:39:
20:3e:07:11:15:9b:80:56:12:08:63:a0:02:17:6f:
32:d0:5b:57:29:f1:e0:88:cb:7e:4d:39:6d:74:ea:
b5:d9:53:84:43:fd:e1:a6:8a:d6:56:ec:ce:11:d6:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.76.0/22
109.197.39.0/24
193.28.226.0/24
193.37.140.0/24
195.211.8.0/22
IPv6:
2001:67c:c90::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49761
Signature Algorithm: sha256WithRSAEncryption
72:a5:2d:7b:13:87:77:bc:d4:56:bd:a2:05:86:a1:e5:0e:ad:
26:a2:dc:11:3e:c3:31:0b:a6:b1:eb:e2:5f:d9:55:eb:6b:52:
63:f4:10:1d:e5:fd:f6:bf:ff:8d:88:55:47:33:e2:f5:58:04:
30:bf:b4:a2:bd:45:52:a1:64:4c:ff:bc:7c:e0:73:f1:e3:38:
94:67:9d:99:6a:11:99:a2:12:63:7c:f2:12:62:06:dd:70:d7:
09:74:fd:11:c3:c4:26:40:e9:e6:d5:f7:6d:dc:8f:bc:df:4d:
9e:6f:b9:ca:cf:52:a6:9d:1c:27:e2:92:8b:7c:a6:90:36:f8:
07:19:21:b0:af:6f:36:24:28:08:c7:d9:c5:36:fb:3c:54:04:
a6:f5:b9:df:63:92:13:74:59:2a:38:39:b2:c6:0d:4d:50:9f:
9e:9c:78:da:d7:f5:28:f4:67:3c:26:1b:c6:3a:71:a0:8d:9b:
56:d0:d7:cc:ba:40:f1:a3:46:f0:5a:ce:e2:0f:d4:5d:d7:ab:
1b:7f:f1:92:9e:d7:87:fb:70:b3:ca:5f:ee:f6:c7:5b:70:0c:
42:4f:e5:c9:1b:5c:48:37:f3:e5:d6:3f:72:93:b4:33:6f:c5:
57:21:65:99:68:83:19:74:77:8e:ec:30:2d:11:06:94:44:e0:
c9:50:b1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:47 2025 by rpki-client